re prevent sql from being displayed
Merge branch 'develop' into security
Merge pull request #41 from yiendos/security

avoid sql injection